Articles

Digital Law Up(to)date: GDPR, eID and customer loyalty cards before the Supreme Court

Digital Law Up(to)date: GDPR, eID and customer loyalty cards before

Digital Law Up(to)date: GDPR, eID and customer loyalty cards before the Supreme Court

27.10.2021 BE law

In this blog, we briefly present a judgment of the Belgian Supreme Court of 7 October 2021 on the reading of the eID card to obtain a loyalty card.

 

The Belgian Supreme Court has annulled a judgment of the Markets Court of 19 February 2020 (only available in Dutch), which itself challenged a decision of the Belgian Data Protection Authority (DPA) of 17 September 2019 (only available in Dutch).  Initially, a customer complained that a retailer had to read his eID card to obtain a loyalty card. The customer refused and filed a complaint against this practice with the DPA. 

There are two interesting points in this judgment of 7 October 2021 (only available in Dutch):

  1. The Supreme Court accepts that the DPA can establish infringements on the basis of a complaint by a person whose data has not been processed. In this case, refusing to provide one's eID card results in not being able to benefit from a loyalty card.
  2. The Supreme Court also considers that such a practice of reading the eID card to obtain a loyalty card, without any other alternative, does not allow the data subject to be considered to have giving a free consent. It considers that the Markets Court did not reason correctly in distinguishing between a disadvantage and the loss of a possible additional benefit, the former not allowing consent to be considered free while the latter does. Unfortunately, the Supreme Court does not give any guidance to facilitate the assessment of the free nature of consent.

 

By Edouard Cruysmans and Erik Valgaeren

Team

Related news

05.11.2021 EU law
European Strategy for Data: short analyse of the proposed regulation of data governance (Data Governance Act)

Articles - On 25 November 2020, the European Commission published a proposal for a regulation on data governance  and a related Q&A. On 1st October 2021, the Council of the European Union agreed position on Data Governance Act. That will allow the Council presidency to start negotiations with the European Parliament. Both the Council and the European Parliament will need to agree on the final text. This blog briefly present the proposal of the European Commission.

Read more